2021-03-10 08:33:40 +00:00
|
|
|
id: dvwa-headless-automatic-login
|
2022-04-22 10:38:41 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
info:
|
|
|
|
name: DVWA Headless Automatic Login
|
|
|
|
author: pdteam
|
|
|
|
severity: high
|
2022-01-04 19:34:16 +00:00
|
|
|
tags: headless,dvwa
|
2024-01-04 06:27:45 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
headless:
|
|
|
|
- steps:
|
|
|
|
- args:
|
|
|
|
url: "{{BaseURL}}/login.php"
|
|
|
|
action: navigate
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
by: x
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input
|
|
|
|
action: click
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
by: x
|
|
|
|
value: admin
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input
|
|
|
|
action: text
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
by: x
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input[2]
|
|
|
|
action: click
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
by: x
|
|
|
|
value: password
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/input[2]
|
|
|
|
action: text
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- args:
|
|
|
|
by: x
|
|
|
|
xpath: /html/body/div/div[2]/form/fieldset/p/input
|
|
|
|
action: click
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2021-03-10 08:33:40 +00:00
|
|
|
- action: waitload
|
2022-07-21 11:10:30 +00:00
|
|
|
|
2022-07-18 20:57:06 +00:00
|
|
|
matchers-condition: or
|
2021-03-10 08:33:40 +00:00
|
|
|
matchers:
|
|
|
|
- part: resp
|
|
|
|
type: word
|
|
|
|
words:
|
|
|
|
- "You have logged in as"
|
2022-07-21 11:10:30 +00:00
|
|
|
|
2022-07-18 20:57:06 +00:00
|
|
|
- part: resp
|
|
|
|
type: word
|
|
|
|
words:
|
|
|
|
- "First time using DVWA"
|
2023-10-20 11:41:13 +00:00
|
|
|
|
|
|
|
# digest: 4b0a00483046022100a040c6c41b9b5b1e73efb018f1cb4fe227565b54bc2aa67dd53e374a885999c9022100fb4ec11f7241e354adad5e019ccd2fdf8fba164935dfaefde071678428bf66a0:922c64590222798bb761d5b6d8e72950
|